CVE-2024-53136
kernel: mm: revert "mm: shmem: fix data-race in shmem_getattr()"
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 4, 2024
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
mm: revert "mm: shmem: fix data-race in shmem_getattr()"
Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS.
As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".
Statement
This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because successful exploitation is limited to a denial of service under specific preconditions without compromising data confidentiality or integrity. The issue causes a kernel deadlock when retrieving file status on temporary filesystems exported across NFS, a configuration uncommon in standard enterprise environments. Triggering the condition requires local user interactions within systems hosting these specific shares, significantly reducing the blast radius on typical deployments.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')